Behavioral task
behavioral1
Sample
69108adc9dfb00f60ea8bd450befa050_NEAS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
69108adc9dfb00f60ea8bd450befa050_NEAS.exe
Resource
win10v2004-20240419-en
General
-
Target
69108adc9dfb00f60ea8bd450befa050_NEAS
-
Size
809KB
-
MD5
69108adc9dfb00f60ea8bd450befa050
-
SHA1
1b3041b77f1b6fa0b5c9d39d2d8c5e5b601cd044
-
SHA256
c5fa3d15bd4773e15cb16b1a786dae7b76be9d261eab951b2fec7c63067ee6da
-
SHA512
f055bb036e1029dd842a3bda15d7e8509c9f9ad5afc59711cd7aa83166214f05ce80df2240044278adf51dc95edd3936ad8ba54561541684c38ce474b5dc07cd
-
SSDEEP
12288:JEyDMhqh4nT9DUzHsdQ5NaOMxRUHFInsGPQk4dv3FKrNQAYo78tAHcJL69Vke3:JBC94zHMLRC+jF4d3Y5r8tKQa3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69108adc9dfb00f60ea8bd450befa050_NEAS
Files
-
69108adc9dfb00f60ea8bd450befa050_NEAS.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.btnj Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE